Urgent help with GPOs

[nesto]

Hi

I need urgent help in order to configurate an OU by appling to it a GPO, I am not a experienced network admin but I have theoretical knowedge.

the Ou is in a domain and that all conteiners that the network have.

the Domain GPO is the defauld and dont have the "no ovewrite" chekbox checked.

the Ou have the "no ovewrite" chekbox checked.

the GPO for the OU is availible (his "disable..." chekbox isnt checked).

the OU have

a Computer (named "copm")

a User (named "test")

I made a GPO that disable the control panel for the users and save it as "nocontrolGPO"

I linked "nocontrolGPO" to my OU then I logged as "test" and ... Nothing happen

the control panel was available to me

what can i do ?

If some one know whats the problem tell me or tell me a way to do it alternatly

my network born from a workgrop that resently i install a win200server and DCPROMO it.I am tring to exercise GPOs on One Computer in the main, actualy is the only computer in my domain (besides f th DC).

so if you have any idia just tel me.

Thanx for you tip

[nesto]

REALLY NEED HELP....

[Marsden]

Look up RSoP... Resultant Set of Policies. Use the tool and it will show you where you need to go...

[nesto]

it installed with dcpromo of in the win2k support tools?

[Marsden]

It is not available for Win2K... it is however in Win2k3 server...

[msbhi22]

policies are applied according to microsoft's direction LSDOU

Local-Site-Domain-OU. What policy you will apply to site will effect all. If for example to two policies applied are conflicting then you can check Don't override option.

If you don't want the pollcy you can select checkbox block policy inhertance

Rsop displays resultant set of policy applied on a machine

[nesto]

ok i resolve the problem

it was DNS i find it on a web page that said:

A. Win2K might not apply GPO settings at the OU level even when everything appears OK at higher levels in the Active Directory (AD) structure. This problem commonly occurs if the client’s preferred DNS server address isn’t working. To determine whether you have that problem, perform the following actions:

Log on as an Administrator to a client PC, and start the Microsoft Management Console (MMC) Computer Management snap-in (go to Start, Programs, Administrative Tools, Computer Management, or right-click My Computer and select Manage).

Under System Tools, expand Event Viewer, then access the Application log.

Check the log for the following entries:

Event ID: 1000

Event Source: Userenv

Description: Windows cannot determine the user or computer name.

Return value (1722).

If these entries exist, the client's preferred DNS server address is invalid or unreachable, which prevents access to the DNS information, and in turn to AD information and applicable GPOs.

To resolve this problem, correct the DNS address by performing the following steps:

Right-click My Network Places, and click Properties.

Right-click Local Area Connection, and click Properties.

Click Internet Protocol (TCP/IP), and click Properties.

Type the correct DNS address in the "Preferred DNS server" field.

Now, when you log on as a user of the OU in question, Win2K will apply the GPO settings. For additional information about the Application log error, see the Microsoft article "Event ID 1000 Is Logged in the Application Event Log."

thank to anyone that tried however.